@eox/drawtools
``` npm install @eox/drawtools ```
11
Versions
—
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
gitHead linked
Maintainers
silvester-parisantillandlubojrschpidistefanbrand
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| publish-pattern | dormant-publish | AI (publish-pattern): SLSA provenance attestation via Sigstore confirms CI/CD publish integrity; dormancy is not indicative of takeover here. | ai | |
| dependencies | unvetted-dep:@eox/ui | AI (dependencies): Same-org sibling dependency from EOX-A/EOxElements monorepo; not an independent risk. | ai | |
| dependencies | unvetted-dep:@eox/elements-utils | AI (dependencies): Same-org sibling dependency from EOX-A/EOxElements monorepo; not an independent risk. | ai |